Back to Signal

Privacy Policy

Last updated: 1 October 2026

SIGNAL is live, in beta, and invite only. This policy covers two different groups of people: anyone who asks us for an invitation, and venues actually using the app. If you have only filled in the form on our website, the first section is the whole of it.

If you have requested an invitation

We collect your email address, your venue name, your suburb, and which part of the page you came from. We use it to work out whether SIGNAL suits your venue, to come back to you about an invitation, and to tell you about the product. We do not sell or rent it to anyone. Ask us to delete it and we will.

If your venue uses SIGNAL

SIGNAL reads your business systems on your instruction, through connections you authorise and can revoke. What it reads depends on what you connect.

From Xero: your profit and loss, bank balances, invoices you have issued, bills you owe, your contacts, your chart of accounts and your tracking categories. When you use the invoice scanner, SIGNAL also creates draft bills in your Xero.

From Square: your payments and refunds, your transaction counts, your item and category sales, your locations, and, where you have it switched on, your rostered hours and wage costs from the Labor API. That last one includes information about your staff, which is personal information about them, not just about your business.

From Instagram: if you connect your venue's Instagram Business or Creator account, SIGNAL reads that account's username, account type, follower count, the number of accounts it follows and its number of posts, once each morning. It does not read your messages, and it does not read who your followers are or anything about them. It never posts, comments, messages or follows.

From you directly: your targets, your trading days and open hours, your weekly wages and hours if you enter them, notes and ideas you write or dictate, the questions you ask in chat, and photographs or files of supplier invoices you scan or forward to your venue's capture address.

From using the app: when you open it, and which suggested actions were shown and acted on. We use this to work out which parts of SIGNAL are worth keeping.

Where it goes

Your data is stored in Google Firebase and Cloudflare, kept separated per venue. Invoice images are stored in Cloudflare R2. Email is delivered through Resend. Local information about your area comes from Google Places.

We use Anthropic's Claude to write the words in your briefing and to answer your questions in chat. The figures are always computed by our own code, never by the model, and the model is given the numbers rather than asked to work them out. To do that, the snapshot of your numbers, your stored notes, and your question are sent to Anthropic. Invoice images are sent to Anthropic to be read. Anthropic does not train its models on this.

Several of these providers store data on infrastructure outside Australia. Access inside Brother of Mine is limited to the people running SIGNAL.

What we will never do with it

We do not sell your data, we do not sell advertising against it, and we do not take commissions or kickbacks from any supplier we mention to you. Where SIGNAL flags that a supplier's prices have gone up, it flags Brother of Mine's own price rises exactly the same way. We do not use one venue's figures to advise another venue by name, and we do not publish comparisons between venues.

Your staff

If you connect Square's Labor features, or invite your team into SIGNAL, we hold information about your employees. You are responsible for telling them. SIGNAL is not a surveillance tool and we will not build one: it reports hours and wage cost in total, to help you roster, and it does not rank or score individual staff.

How long we keep it, and getting it back

We keep your daily snapshots and the records they were built from so that a number we showed you last year can still be explained this year. You can export everything SIGNAL holds for your venue at any time, free, including if you leave. Ask us to delete your data and we will delete it, not flag it as hidden. Disconnecting Xero or Square removes our access to your accounts immediately and we revoke the connection at their end too.

Disconnecting Instagram deletes our access to the account. Instagram gives us no way to revoke it at their end, so to remove SIGNAL there too, open Instagram settings, then Apps and websites. If you ask Instagram to have your data deleted, we delete the access and every follower count we stored for that account, and Instagram shows you our confirmation.

Your choices

To see what we hold, correct it, export it or delete it, email jos@brotherofmine.com.au. Marketing emails always carry an unsubscribe link. Your daily briefing is a service email and you can turn it off in the app.

Complaints

We handle privacy in line with the Australian Privacy Principles. If you have a concern, contact us first and we will sort it. You can also contact the Office of the Australian Information Commissioner (oaic.gov.au).

Changes

SIGNAL is in beta and changing. When what we collect changes, this page changes with it and the date at the top moves. If a change materially affects venues already using it, we will tell you rather than expecting you to notice.

SIGNAL by Brother of Mine Coffee Roasters Australia Pty Ltd. Perth, Western Australia. Questions: jos@brotherofmine.com.au